A prolific hacking group has taken credit score for final week’s cyberattack towards U.S. pharmaceutical distribution large McKesson, resulting in the most recent spill of extremely delicate well being information by an American healthcare firm in latest months.
McKesson confirmed Friday in a statement on its website that hackers broke into a number of of its cloud-hosted accounts earlier within the week and exfiltrated information, and that the corporate anticipated “intermittent service degradation” associated to the incident. In a separate discover to prospects, the corporate’s chief know-how officer, Francisco Fraga, mentioned the stolen information pertains to its oncology & multispecialty and medical-surgical items.
The Texas-based firm is without doubt one of the largest American distributors of prescription drugs, medicines, medical provides, and know-how to hospitals and healthcare suppliers throughout the US, and as such handles a considerable amount of affected person information.
The ShinyHunters hacking group — one of the crucial lively data-extortion crews of the previous two years — advised TechCrunch that it hacked the corporate’s cloud setting by tricking a number of staff into granting the hackers’ entry to McKesson’s community through the use of phishing and social engineering tips, which the group is thought for.
The hackers mentioned they stole a variety of non-public info, equivalent to names, addresses, and Social Safety numbers, in addition to protected well being info, together with diagnoses, medicines, allergic reactions, and affected person notes. The hackers say they took thousands and thousands of rows of affected person information from the corporate’s cloud-hosted Snowflake and Salesforce environments, however that they’re not sure of what number of people are in the end affected.
The stolen information additionally included McKesson staff’ info, equivalent to house addresses.
ShinyHunters shared screenshots and a pattern of the stolen information with TechCrunch, and we verified a small subset of it towards public data.
Bleeping Laptop, which first reported the link to the ShinyHunters hacking group, mentioned the hackers demanded a $55 million ransom from the corporate in change for not publicly releasing the stolen recordsdata.
A spokesperson for McKesson didn’t reply to TechCrunch’s request for touch upon Monday.
McKesson is the most recent healthcare firm or medical machine maker to be focused in a string of cyberattacks in latest months, as hackers purpose to steal massive quantities of delicate medical and well being information that they’ll use to extort the businesses into paying a ransom to maintain it from being printed.
Final week, medical machine maker Boston Scientific was hit by a cyberattack that knocked a lot of the corporate’s community offline. The cyberattack had the same impact to an incident earlier this 12 months at one other medical machine maker Stryker, during which hackers abused an organization’s inner instruments to remotely wipe hundreds of worker units. Abbott Laboratories and Medtronic have additionally skilled cyberattacks, whereas digital affected person data supplier CareCloud and well being tech firm TriZetto had breaches affecting over 3 million sufferers every.
The ShinyHunters hackers have additionally taken credit score for sizable information breaches at Amazon-owned OneMedical and dental insurance company DentaQuest following cyberattacks on their programs.
Lorenzo Franceschi-Bicchierai contributed reporting.
While you buy via hyperlinks in our articles, we could earn a small fee. This doesn’t have an effect on our editorial independence.